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Amendments ♦» the Claims 

the app?cL S t!on; n9 ^ ** v™'™ 5 ' 3nd ,fetlngS ' ° f c,alms ln 

Listing of Claims- 
1-10. (Canceled) 

1 1. (Currently Amended) A method of controlling access to records stored in a 
database, said method comprising: 

identifying a password that fs associated with one or more users of said 
database; 

defining a calculation expression for said identified password, wherein 
said calculation expression is a variable expression defined based on at least 
one field of data used in a plurality of records stored in said database, a«d 
wherein said calculation Bamsshn can be evaluated at least partly based on 
said at least one field of data used in said plurality of records, wherein said at 
least one field of data is a variable which may have different values for each of 
said plurality of records, thereby allowing access to each individual record of 
various f i oldo of data stored in said plurality of records to be selectively controlled 
based on at least one value of said a t least one field of data stargd for each of 
said plurality of records of said dac has*, and wherein said calculation 
expression defines access privileges of said one or more users with respect to at 
least one operation that may be requested to be performed by said one or more 
users on said plurality of records of said database; 

receiving a request to perform said at least one operation on said plurality 
of records of said database, said request being identified as a request made by 
said one or more users associated with said password; and 

evaluating said calculation expression for said each of said plurality of 
records, based on said at least one field of data, when said request has been 
received, wherein said evaluating comprises: (a) determining at least one value 
for said at least one field of data stored for a first record of said plurality of 
rec °rdSi and using said at least one value as input to said calculation 
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H T eSS ' 0n * LJ ** !i1 ^^ and fc ) 

tommm*** resu.t for said Cchtinn nrpre^n based on said Minn 
ofsa.d ^"'atioruge^^ 

f^ ~- w he ther to grant ^ ^ ^ ^ rrrnn _, , , , ^ |f 

f"™ 0 ° nt) ' U T * "° P ° 0 0i llC " ,f,r fnr " r ^ Pi t ly o f ro c ordo onu 

< *? n. d po o oib l o inditing th nf - i f , I > t L ^ t n n n np erati u n J.u u ld bo 

gmn to d and an o to o n o of said p ossi^i^ in dlW?na t hn t n U Jt ^ ^ 
operation should bo donioeV 

9^^^ayea6 ^ , n P oprm fi o n t n he pcf m rnuj whon c a i d eva l u at i o n 
retnm r n n n n n M J L | L W 1 „, n f n in f ti r nt( . 1 |) uf ^ ^ ^ ^ 

Eh=* granted; and 

ri o nylng said at I nn ct ono operati o n to bo pcrform o d wh n n said evaluati o n 
r o f i irnrr ono paid an o th e r p n r r rf hlr vn lu i to indi uuU i t h a t s o ld at loaot um o 
operation chould bo denied ? 

12. (Original) A method as recited in claim 1 1 , wherein said at least one 
operation can be a browse, an edit, or a delete operation. 

1 3. (Original) A method as recited in claim 1 1 , wherein said calculation 
expression is not explicitly defined for said at least one operation but said 
calculation expression is one that has been defined for another operation which 
has been considered as a related operation to said at least one operation. 

14. (Previously Presented) A method as recited in claim 1 1 , 

wherein said calculation expression can be evaluated at least partly based 
on at least one state variable of said database, wherein said state variable can 
indicate the condition of an element of said database at a particular time. 

1 5. (Original) A method as recited in claim 14, wherein said method further 
comprises: 

granting temporary or limited access to said at least one record to allow 
said evaluating of said calculation expression. 

16-37. (Canceled) 
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38. (Currently Amended) A computer readable 
program code for controlling access to records 
computer readable medium comprising: 

computer program code for identifying a 
one or more users of said database; 

computer program code for defining a 
identified password, wherein said calculation 
defined based on at least one field of data used in a 
said database A and wherein said calculation 



medium including computer 
in a database, said 



password that is associated with 



calculation 



expression 



express ion 



partly based on said at least one field of data used 
wherein said at least one field of data is a variable 
values for each of said plurality of records, thereby 
access to each individu al record of y n nw « n i^ „ f 



records to be selectiv ely contro||e ri based on at \»**< 



expression for said 
Is a variable expression 
plurality of records stored in 
can be evaluated at least 
said plurality of records, 
which may have different 
a lowing soloctivo l y controlling 
stored I b said plurality of 



in 



<=ata- 



pne field of data stored fhr each of said plurality of m 



one value o f said at laa^ fr 



wherein said calculation expression defines access 
more users with respect to at feast one operation thai 
performed by said one or more users on said plurality 
database; 

computer program code for receiving a reques 
one operation on said plurality of records of said 
identified as a request made by said one or more 
password; and 

computer program code for evaluating said 
each of said plurality of records, based on at least one 
request has been received, wherein said evaluating 
at least one value for said at least one field of data sto 



sords of sa id database , and 



uses 



Plurality of records an# £b) using said at least one va 
calculation expression to evaluate said calculation 



record, and (c) determininn a first result f or said calculMtion expression based on 



said evaluation of said calculation ex pression for said first record, wherein sairi 



first result effectively in dicates whether to grant arrets 



evaluation returning on l y ono of two po T trihln vnluos for each of said p l urolity of 



records, ono of paid possib l e va l uoo indicating that cak 
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privileges of said one or 
may be requested to be 
of records of said 



data jase 



to perform said at least 
>, said request being 
associated with said 



calculation expression for 
field of data, when said 
comprises : Ca) determining 
ned for a first reoorrf of sairf 



lue ; 



as input to said 
expression for said first 



to said first record, -said 



■ at l e act ono oporation 
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l o ast o no opor n ti o n should bo do n lodj 

^m^^ n rn i ri nvn l uat. o n rului m. m^l^s ^vtu o to in di c at e th a t 
eairf nttoact ono o pcr.H i n n chn..irf hr grant e d ; and 

rn mp i if p rprqg r a. il r-nrto for d ony i„ y ^^teas^ne^pemtiof^e 
P6ffefme ^ wh o n Daid oval i M l ton ret u rns on e s aid-aethe r p ocs ib lo v aluo to 
i ndicato that ca i ri ifnrt nnn ^ r r, rnf irn r rh o uld be don i u U. 

39. (Previously Presented) A computer readable medium as recited in claim 
38, wherein said at least one operation can be a browse, an edit, or a delete 
operation. 

40. (Previously Presented) A computer readable medium as recited In claim 
38, wherein said calculation expression is not explicitly defined for said at least 
one operation but said calculation expression is one that has been defined for 
another operation which has been considered as a related operation to said at 
least one operation. 

41 . (Previously Presented) A computer readable medium as recited In claim 
38, wherein said calculation expression can be evaluated at least partly based on 
at least one state variable of said database. 

42. (Previously Presented) A computer readable medium as recited in claim 
38, further comprising: 

computer program code for granting temporary or limited access to said at 
least one record to allow said evaluating of said calculation expression. 

43. (Currently Amended) A database sjrstems system comprising!!;]]: 
a database including a plurality of records stored therein; 

a database program that can access said database and can be used as 
an interface to said database, wherein said database program includes a 
Graphical User interface which can be used to: define a calculation expression 
for controlling access to said plurality records in said database, wherein said 
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ca Iculafon expression is a variable expression defined based on at least one 
field of data used in a plurality of records stored in said database, and wherein 
sa,d calculation *irn n~»ihn can be evaluated at least partly based on said at 
least one field, wherein said at least one field of data is a variable which may 
have drfferent values for each of said plurality of records, thereby allowing access 
to sa.d plurality of records to be selectively determined based on said calculation 
expression; and 

wherein said database program is further capable of: 

receiving a request to perform at least one operation on said 
plurality of records in said database; and. 

evaluating said calculation expression for each of said plurality of 
records, wherein said evaluating comprises:!!} determining at least one 
value for said at least one field of data stored for a first record of m m 
plurality of record^, and £bj using said at least one value as input to said 
calculation expression to evaluate sa id calculation expression far said fire* 
record, and (c) determining a first resu lt for said calculation expression 
based on said evaluation of sai d calculation expression for said first 
record, wherein said first result ef fectively indicates whether to nrant 
access to said first re^rri ,.,hr^j n ^rt rvnl u nti n n r ct u rnc on ly u n o of 
«wo poreiblo valuoo for each of oaid plurality of records, one of sa i d 
PQGoiblo valuoG i nd i cating thnt nntn it nnr ^rati o n should b o 
nrnntod and onnthwr nnn nfmM pn-rfh^ Yr i | 1i r n in r l f o n tin r j that ca i d Jt 
least ono operation ohould bo deniod; 

granting caid ot least ono operation to bo performed when oaid 
evaluation r o turnc ono ca i d poarJ h ln mhm tr. inrfi^tr that s aid a t I cac t one 
operation ahould bo grant e d; and 

denying said at least ono operation to bo performed when oaid 
evaluation roturnc ono caid another pocoiblo valuo to indicate that oaid at 
l eact ono operation chould bo den iedr 

44. (Canceled) 

45. (Previously Presented) A database as recited In claim 43, wherein sard at 
least one operation can be a browse, an edit, or a delete operation. 
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46 (Previously Presented) A database as recited in claim 43, wherein said 
calculation expression is not explicitly defined for said at least one operation but 
sa.d calculation expression is one that has been defined for another operation 
wh.ch has been considered as a related operation to said at .east one operation. 

47. (Previously Presented) A database as recited in claim 43, wherein said 
calculation expression can be evaluated at least partly based on at feast one 
state variable of said database. 



48-50 (Canceled) 



5 1 . (New) A method as recited in claim 1 , wherein said evaluation can return 
at least two possible values for each of said plurality of records, one of said 
possible values indicating that said at least one operation should be granted and 
another one of said possible values indicating that said at least one operation 
should be denied. 



52. (New) A method as recited in daim 51 , wherein said method further 
comprises: 

granting said at least one operation to be performed when said evaluation 
returns one said possible value to indicate that said at least one operation should 
be granted; and 

denying said at least one operation to be performed when said evaluation 
returns said another possible value to Indicate that said at least one operation 
should be denied. 

53. (New) A method for selectively controlling access to individual records 
stored in a database, said method comprising: 

defining an expression that can be evaluated for each of a plurality of 
records stored in a database, wherein said plurality of records of said database 
includes a first record and a second record; 

evaluating said expression for said first record of said plurality of records 
of said database; and 
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determining, based on said evaluating of said calculation expression for 
said first record, whether to grant access to said first record of said piuraiity of 
records of said database. 

54. (New) A method as recited in claim 53, 

wherein said expression is defined based on at least one field of data 
stored for said first and second record, and 

wherein said evaluating of said expression for said first record comprises: 
retrieving a first value stored In said first record for said at least one 

field; 

evaluating said expression for said first record based on said first 
value provided as input to said expression; and 

determining a first result based on said evaluating of said 
expression for said first record, wherein said first result effectively 
indicates whether to grant access to said first record. 

55. (New) A method as recited in claim 54, wherein said method further 
comprises: 

evaluating said expression for said second record of said plurality of 
records of said database; and 

determining, based on said evaluating of said calculation expression for 
said second record, whether to grant access to said second record of sard 
plurality of records of said database. 

56. (New) A method as recited In claim 55, wherein said determining of 
whether to grant access to said first record determines to grant access to said 
first record, but said determining of whether to grant access to said second 
record determines not to grant access to said second record. 

57. (New) A method as recited rn claim 51 , wherein said expression is defined 
based on data stored in said database. 

58. (New) A method as recited in claim 51, wherein said expression is defined 
based on one or more of the following: 
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a field of data stored in said database; 
a state variable of said database; and 
data stored or referenced by said database. 
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